Description

In Shibboleth authentication most IDPs do not supply an email address so authentication fails.
Modifications need to be made to the Shibboleth authentication class and the Update Profile process so that authentication can proceed without an email address and that the user can update their profile to provide an email address and first/last name.
Also need to ensure that when a profile has been updated it is not overwritten on subsequent logins and that the email address (if supplied by the IDP) will only be updated if it has changed.